Mobile Platforms to Support Network Forensics - Phase II

"In a large computer network, a sophisticated, coordinated attack can have a devastating impact. To thwart such an attack, investigators and administrators must be able to quickly ascertain its effects. Complicating this task is the fact that few largefacilities, either commercial or military, have sufficient expert personnel to physically examine each network segment that was attacked, since often these networks are separated by hundreds, if not thousands, of miles. Odyssey Research Associatesproposes to create a mobile forensic platform (MFP) tool to aid the investigators with the forensic task. MFPs are computers that can be quickly deployed on any network to perform remote forensic investigation with very high assurance security. The MFPswill contain a number of extensible forensic tools that allow an investigator to quickly and securely examine network resources remotely."